$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a313030323a3a2f34382d3438203d3e203238323230.roa File: 323830343a3838303a313030323a3a2f34382d3438203d3e203238323230.roa (raw, json) Hash identifier: H6ccKzcYMnWWWK3ckeFsAUIZpa9EZYStDATDkaUW3Z8= Subject key identifier: 14:E1:E5:EF:3B:34:A6:7F:E5:9E:B8:1F:78:6D:C5:BE:56:31:B7:8D Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 1DC5AF87D857311E2C5CC4B7E11890FDEFBA9ED6 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a313030323a3a2f34382d3438203d3e203238323230.roa Signing time: Thu 23 Oct 2025 17:43:05 +0000 ROA not before: Thu 23 Oct 2025 17:38:05 +0000 ROA not after: Thu 22 Oct 2026 17:43:05 +0000 asID: 28220 IP address blocks: 2804:880:1002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:c5:af:87:d8:57:31:1e:2c:5c:c4:b7:e1:18:90:fd:ef:ba:9e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 23 17:38:05 2025 GMT Not After : Oct 22 17:43:05 2026 GMT Subject: CN=14E1E5EF3B34A67FE59EB81F786DC5BE5631B78D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:50:ae:3a:a2:53:b1:89:02:ce:ec:1a:f5: d1:88:46:4a:bb:32:39:4d:e7:13:dd:86:d6:46:9e: 2c:70:49:9a:25:9f:95:1d:b6:24:a4:d4:95:cc:23: 1d:12:40:e7:26:ab:ae:5b:43:92:93:19:ed:a2:10: 59:12:09:9a:e7:bb:fd:d5:17:cf:56:d6:48:3e:c2: 12:df:fd:35:20:30:2b:b6:81:25:40:2f:c0:00:7a: 07:74:b0:95:d6:f2:d3:3d:22:13:13:29:9c:10:57: 61:4f:70:04:2f:81:6f:f3:98:b6:1e:16:ba:c3:96: c8:2b:f9:af:7e:96:29:8e:18:46:52:45:2e:0a:17: 00:94:a6:11:31:59:70:19:72:fc:17:9d:0a:60:9e: 6e:5e:12:dc:b0:1e:bc:67:9b:7c:62:bb:2c:ad:05: ba:1b:c2:52:57:6c:d4:d4:96:6c:b4:64:c0:ff:6f: c0:3c:27:82:96:2d:b9:8a:1d:6b:67:73:91:d2:8d: 49:3e:2d:f3:8e:d5:c0:db:bc:d7:55:7a:54:f9:1c: db:17:43:19:07:2e:f8:d6:57:79:42:7d:5a:e0:43: 05:e6:4b:41:a6:18:c2:83:55:fc:1d:90:01:9f:ec: bf:a8:67:a1:07:55:52:be:ed:65:e2:d4:9d:bc:09: 29:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E1:E5:EF:3B:34:A6:7F:E5:9E:B8:1F:78:6D:C5:BE:56:31:B7:8D X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a313030323a3a2f34382d3438203d3e203238323230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:880:1002::/48 Signature Algorithm: sha256WithRSAEncryption 65:9a:38:f1:70:97:bb:bf:c0:43:4d:29:85:32:30:ba:67:39: bb:7b:b7:dc:7f:4f:3a:98:72:ba:e1:00:45:c0:a2:3e:fa:43: b7:c3:9b:ea:32:ef:62:b5:81:a5:bb:19:85:49:de:d2:b3:fc: 41:06:1e:9b:48:de:61:10:3d:ee:2a:68:f9:2f:9a:63:3f:62: 7b:7d:da:df:02:1f:de:87:ab:85:b0:1c:33:06:06:95:bf:2d: eb:7f:d6:ef:35:45:34:38:98:6f:b2:d5:93:0e:41:73:5b:e3: 19:29:2b:12:a5:20:06:f6:af:0f:6f:cd:f1:f1:f0:8d:6e:d7: 3b:25:e6:a6:4a:e9:8f:a3:61:1e:71:35:fd:4c:14:ab:cc:43: f0:b5:4d:a4:9f:0a:67:53:85:84:e7:be:64:4a:de:77:61:a4: 21:e2:80:c2:d8:41:d9:02:67:d7:be:28:8f:5c:09:22:d0:d2: 81:c9:1d:65:63:06:d2:26:0d:74:98:1e:b7:93:6d:ab:95:db: c4:3b:42:a6:3b:97:37:36:1a:cb:85:c6:db:04:21:9a:56:54: 3a:30:51:c0:9f:24:75:bc:83:f2:af:c2:f9:b9:cd:2d:7f:3d: 88:50:fb:3c:ff:8b:d8:a2:15:66:5c:1b:a3:7e:bc:61:4e:73: c4:9c:3e:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUHcWvh9hXMR4sXMS34RiQ/e+6ntYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMjMxNzM4MDVaFw0yNjEwMjIxNzQzMDVaMDMxMTAvBgNV BAMTKDE0RTFFNUVGM0IzNEE2N0ZFNTlFQjgxRjc4NkRDNUJFNTYzMUI3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzE1CuOqJTsYkCzuwa9dGIRkq7 MjlN5xPdhtZGnixwSZoln5UdtiSk1JXMIx0SQOcmq65bQ5KTGe2iEFkSCZrnu/3V F89W1kg+whLf/TUgMCu2gSVAL8AAegd0sJXW8tM9IhMTKZwQV2FPcAQvgW/zmLYe FrrDlsgr+a9+limOGEZSRS4KFwCUphExWXAZcvwXnQpgnm5eEtywHrxnm3xiuyyt BbobwlJXbNTUlmy0ZMD/b8A8J4KWLbmKHWtnc5HSjUk+LfOO1cDbvNdVelT5HNsX QxkHLvjWV3lCfVrgQwXmS0GmGMKDVfwdkAGf7L+oZ6EHVVK+7WXi1J28CSn5AgMB AAGjggJYMIICVDAdBgNVHQ4EFgQUFOHl7zs0pn/lnrgfeG3FvlYxt40wHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzIzODMwMzQzYTM4MzgzMDNhMzEzMDMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNl MjAzMjM4MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQIgBACMA0GCSqGSIb3DQEBCwUAA4IB AQBlmjjxcJe7v8BDTSmFMjC6Zzm7e7fcf086mHK64QBFwKI++kO3w5vqMu9itYGl uxmFSd7Ss/xBBh6bSN5hED3uKmj5L5pjP2J7fdrfAh/eh6uFsBwzBgaVvy3rf9bv NUU0OJhvstWTDkFzW+MZKSsSpSAG9q8Pb83x8fCNbtc7JeamSumPo2EecTX9TBSr zEPwtU2knwpnU4WE575kSt53YaQh4oDC2EHZAmfXviiPXAki0NKByR1lYwbSJg10 mB63k22rldvEO0KmO5c3NhrLhcbbBCGaVlQ6MFHAnyR1vIPyr8L5uc0tfz2IUPs8 /4vYohVmXBujfrxhTnPEnD7o -----END CERTIFICATE-----Generated at Mon Nov 3 19:10:59 2025 by rpki-client